<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; "><span>Euan,</span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><span><br></span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><span>What he means is that your gateway must be configured for all of its SIP traffic to be bound to one IP address. This IP address is what you will tell your ITSP you will be using to connect to them. The ITSP will then ONLY accept your SIP traffic from that IP address. If your CUBE is using NAT behind an ASA then one of the public IP addresses you have connected to the ASA
will have to be the address you tell your ITSP you'll be using for connectivity. </span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><span><br></span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">You can use this for reference...</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><br></div><div style="background-color: transparent; ">http://www.cisco.com/en/US/docs/ios/voice/cube/configuration/guide/vb-gw-sipsip.html<br></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;
"><br></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal; ">depending on the number of SIP sessions required by your site, you'll have to purchase an appropriate CUBE license for the number of simultaneous sessions needed...</div> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; "> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; "> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Euan McGregor <euan@mcgregor.co><br> <b><span style="font-weight: bold;">To:</span></b> "Mike Wilusz, (miwilusz)" <miwilusz@cisco.com>; cisco-voip@puck.nether.net <br> <b><span style="font-weight: bold;">Sent:</span></b> Monday, September 3, 2012 5:47 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re:
[cisco-voip] CUBE SIP Trunk IP Authentication<br> </font> </div> <br>
<meta http-equiv="x-dns-prefetch-control" content="off"><div id="yiv2087844661"><div>Thanks Mike, </div>
<div>It is a BE 3000 so all I can do is point the PSTN connection to the router. Not sure what you mean by pointing the call manager to the bound interface that interface is the WAN port of the router which is directly behind the firewall. </div>
<div>Apologies if I have missed the point still new to this stuff. </div>
<div>Thanks<br>
<u>Euan</u></div>
<div class="yiv2087844661gmail_quote">On Sep 3, 2012 10:15 PM, "Mike Wilusz (miwilusz)" <<a rel="nofollow" ymailto="mailto:miwilusz@cisco.com" target="_blank" href="mailto:miwilusz@cisco.com">miwilusz@cisco.com</a>> wrote:<br><blockquote class="yiv2087844661gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div style="font-size: 14px; font-family: Calibri, sans-serif; word-wrap: break-word; ">
<div>
<div>
<div>Just ensure that your CUCM is pointing to the same bind interface. Keep in mind the messages will still flow out likely the internal interface, but the IP inside the message will be from the bind interface. Anything else I can help with, let me know.</div>
<div><br>
</div>
<div>-mike</div>
<div>
<div>
<div>
<div style="font-size: 14px; font-family: Calibri, sans-serif; ">
<br>
</div>
</div>
</div>
</div>
</div>
</div>
<span>
<div style="border-width: 1pt medium medium; border-style: solid none none; padding: 3pt 0in 0in; text-align: left; font-size: 11pt; font-family: Calibri; border-top-color: rgb(181, 196, 223); ">
<span style="font-weight:bold;">From: </span>Euan McGregor <<a rel="nofollow" ymailto="mailto:euan@mcgregor.co" target="_blank" href="mailto:euan@mcgregor.co">euan@mcgregor.co</a>><br>
<span style="font-weight:bold;">Date: </span>Monday, September 3, 2012 5:12 PM<br>
<span style="font-weight:bold;">To: </span>Michael Wilusz <<a rel="nofollow" ymailto="mailto:miwilusz@cisco.com" target="_blank" href="mailto:miwilusz@cisco.com">miwilusz@cisco.com</a>><br>
<span style="font-weight:bold;">Subject: </span>Re: [cisco-voip] CUBE SIP Trunk IP Authentication<br>
</div>
<div><br>
</div>
<div>
<div>Hi Mike,
<div><br>
</div>
<div>Thanks for that, yes the provider is simply basing the authentication on the source IP. Will that not affect the SIP trunk going the other way back to call manager if I specifically bind it to an external port on the CUBE?</div>
<div><br>
</div>
<div>Regards,</div>
<div><br>
</div>
<div>Euan</div>
<div><br>
<div class="yiv2087844661gmail_quote">On Mon, Sep 3, 2012 at 9:53 PM, Mike Wilusz (miwilusz) <span dir="ltr">
<<a rel="nofollow" ymailto="mailto:miwilusz@cisco.com" target="_blank" href="mailto:miwilusz@cisco.com">miwilusz@cisco.com</a>></span> wrote:<br>
<blockquote class="yiv2087844661gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div style="font-size: 14px; font-family: Calibri, sans-serif; word-wrap: break-word; ">
<div>
<div>
<div>Euan,</div>
<div><br>
</div>
<div>I think "IP Authentication" can mean a few different things. I have seen it mostly mean that the provider is not requiring a username/password, but that you must send all SIP messages from a pre-allowed IP address, typically your WAN interface. On CUBE,
you'll need to use the <b>bind </b>command to bind the SIP messages to the interface with the IP address that is allowed by the carrier. Take a look here: http://www.cisco.com/en/US/docs/ios/voice/cube/configuration/guide/vb_1142_ps5640_TSD_Products_Configuration_Guide_Chapter.html</div>
<div><br>
</div>
<div>-mike</div>
</div>
</div>
<div><br>
</div>
<span>
<div style="border-width: 1pt medium medium; border-style: solid none none; padding: 3pt 0in 0in; text-align: left; font-size: 11pt; font-family: Calibri; border-top-color: rgb(181, 196, 223); ">
<span style="font-weight:bold;">From: </span>Euan McGregor <<a rel="nofollow" ymailto="mailto:euan@mcgregor.co" target="_blank" href="mailto:euan@mcgregor.co">euan@mcgregor.co</a>><br>
<span style="font-weight:bold;">Date: </span>Monday, September 3, 2012 3:23 PM<br>
<span style="font-weight:bold;">To: </span>"<a rel="nofollow" ymailto="mailto:cisco-voip@puck.nether.net" target="_blank" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a>" <<a rel="nofollow" ymailto="mailto:cisco-voip@puck.nether.net" target="_blank" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a>><br>
<span style="font-weight:bold;">Subject: </span>[cisco-voip] CUBE SIP Trunk IP Authentication<br>
</div>
<div>
<div>
<div><br>
</div>
<div>
<div>Hello,
<div><br>
</div>
<div>This may be in the archives but I can't see anything.</div>
<div><br>
</div>
<div>I have a customer site who I am trying to setup a CUBE and a SIP trunk but the provider only accepts IP authentication from our IP address and not username and password authentication. I have searched Google but I cannot find any documentation on how to
get the CUBE (881) to register to the provider (Pulsant here in the UK).</div>
<div><br>
</div>
<div>Can anyone point me in the direction of a config, document or even a heads up how to get it to work?</div>
<div><br>
</div>
<div>Thanks in advance.</div>
<div><br>
</div>
<div>Regards,</div>
<div><br>
</div>
<div>Euan</div>
</div>
</div>
</div>
</div>
</span></div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</span>
</div>
</blockquote></div>
</div><meta http-equiv="x-dns-prefetch-control" content="on"><br>_______________________________________________<br>cisco-voip mailing list<br><a ymailto="mailto:cisco-voip@puck.nether.net" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br><br><br> </div> </div> </div></body></html>